=BF=AD=C3=C0=CC=D8=B5=E7=D7=D3=D4=D3=D6=BE

From nneul at umr.edu Fri Mar 1 18:16:08 2002 From: nneul at umr.edu (nneul@umr.edu) Date: Fri, 1 Mar 2002 17:16:08 -0600 Subject: krb5-libs/1067: build krb524 on windows Message-ID: <200203012316.g21NG8pp008750@infinity.cc.umr.edu> >Number: 1067 >Category: krb5-libs >Synopsis: need krb524 lib built on windows >Confidential: no >Severity: serious >Priority: medium >Responsible: krb5-unassigned >State: open >Class: change-request >Submitter-Id: unknown >Arrival-Date: Fri Mar 1 18:17:00 EST 2002 >Last-Modified: >Originator: Nathan Neulinger >Organization: -- Nathan ------------------------------------------------------------ Nathan Neulinger EMail: nneul at umr.edu University of Missouri - Rolla Phone: (573) 341-4841 Computing Services Fax: (573) 341-4216 >Release: krb5-current-20020228 >Environment: System: Linux infinity.cc.umr.edu 2.4.18 #2 SMP Thu Feb 28 13:32:37 CST 2002 i686 unknown Architecture: i686 >Description: krb524 needs built on windows for aklog users >How-To-Repeat: >Fix: Enable build in makefiles. Brings up issue with krb_life_to_time being undefined that might need resolved to actually build it, but other than that, should only require minor changes to actually build. >Audit-Trail: >Unformatted: From marketing at elabmarket.com Tue Mar 5 20:01:28 2002 From: marketing at elabmarket.com (chemat) Date: Wed, 6 Mar 2002 09:01:28 +0800 Subject: pending/1068: 凯美特电子杂志：第三期（2002年） Message-ID: <2653175-220023361128640@elabmarket.com> >Number: 1068 >Category: pending >Synopsis: 凯美特电子杂志：第三期（2002年） >Confidential: yes >Severity: serious >Priority: medium >Responsible: gnats-admin >State: open >Class: sw-bug >Submitter-Id: unknown >Arrival-Date: Tue Mar 5 20:02:00 EST 2002 >Last-Modified: >Originator: >Organization: >Release: >Environment: >Description: >How-To-Repeat: >Fix: >Audit-Trail: >Unformatted: ------=_NextPart_84815C5ABAF209EF376268C8 Content-type: text/plain; charset="US-ASCII" XIAMEN CHEMAT SCIENTIFIE INSTRUMENTS CO., LTD. WWW.ELABMARKET.COM TEL:0592-5715756 FAX:0592-5714417 ------=_NextPart_84815C5ABAF209EF376268C8 Content-Type: text/html; charset="US-ASCII" Content-Transfer-Encoding: quoted-printable =BF=AD=C3=C0=CC=D8=B5=E7=D7=D3=D4=D3=D6=BE =

=20 =20 =20

=20 =20

=20 =20 =20 =20

=A1=A1=A1=A1=BF=AD=C3=C0=CC= =D8=B9=AB=CB=BE=CA=C7=C3=C0=B9=FAStrem =20 =BB=AF=D1=A7=CA=D4=BC=C1=B9=AB=CB=BE=D4=DA=D6=D0=B9= =FA=B5=C4=D6=B8=B6=A8=B4=FA=C0=ED=A3=AC=B2=A2=D3=EBAldrich =20= =BB=AF=D1=A7=CA=D4=BC=C1=B9=AB=CB=BE=BD=A8=C1=A2=C1= =CB=B3=A4=C6=DA=C1=BC=BA=C3=B5=C4=C3=B3=D2=D7=B9=D8=CF=B5=A1=A3=CE=D2=B9=AB= =CB=BE=BB=B9=C8=AB=C3=E6=BE=AD=CF=FASigma=A3=ACFluka, =20 Fisher=A3=ACAlfa =20 Aesar=A3=ACGelest=A3=ACAcros=A3=ACBsaf,Dow=B5=C8= =B9=AB=CB=BE=B5=C4=B2=FA=C6=B7=A1=A3=B6=D4=C3=BF=D2=BB=B5=A5=B6=A9=BB=F5=BA= =CD=D1=AF=BC=DB=A3=AC=B1=BE=B9=AB=CB=BE=B5=C4=CA=D4=BC=C1=B7=D6=CE=F6=D7=A8= =BC=D2=B6=BC=CE=AA=C4=FA=CC=E1=B9=A9=D7=A8=D2=B5=A1=A2=D6=DC=B5=BD=B5=C4=BC= =BC=CA=F5=D6=A7=B3=D6=BA=CD=B7=FE=CE=F1= =A3=BB=CE=AA=B7=BD=B1=E3=BB=F5=CE=EF=C5=E4=CB=CD=A3=AC=C4=BF=C7= =B0=B1=BE=B9=AB=CB=BE=D2=D1=BE=AD=D4=DA=B1=B1=BE=A9=A1=A2=C9=CF=BA=A3=A1=A2= =CF=C3=C3=C5=A1=A2=CE=E4=BA=BA=A1=A2=B7=F0=C9=BD=BD=A8=C1=A2=C1=CB=B7=D6=B9= =AB=CB=BE=B2=A2=BC=B4=BD=AB=D4=DA=B3=C9=B6=BC=A1=A2=CE=F7=B0=B2=A1=A2=CC=EC= =BD=F2=A1=A2=B3=A4=B4=BA=A1=A2=B9=E3=D6=DD=A1=A2=B8=A3=D6=DD=B5=C8=B5=D8=C9= =E8=C1=A2=B7=D6=B9=AB=CB=BE=BB=F2=B0=EC=CA=C2=B4=A6=A3=AC=CE=AA=B9=E3=B4=F3= =B5=C4=BD=F8=BF=DA=BB=AF=D1=A7=CA=D4=BC=C1=D3=C3=BB=A7=CC=E1=B9=A9=BF=EC=CB= =D9=B1=E3=BD=DD=B5=C4=C5=E4=CB=CD=B7=FE=CE=F1=A1=A3
=20 =D6=B5=B5=C3=D2=BB=CC=E1=B5=C4=CA=C7=BF=AD=C3=C0=CC=D8=B9=AB=CB= =BE=D4=DA=C3=C0=B9=FA=C2=E5=C9=BC=ED=B6=D7=DC=B2=BF=BA=CD=C9=CF=BA=A3=D1=D0= =B7=A2=BB=F9=B5=D8=C9=E8=C1=A2=D3=D0=D7=D4=BC=BA=B5=C4=CA=D4=BC=C1=BA=CD=D0= =C2=B2=C4=C1=CF=D1=D0=B7=A2=B2=BF=C3=C5=A3=AC=BF=C9=D3=A6=BF=CD=BB=A7=B5=C4= =D2=AA=C7=F3=A3=AC=CE=AA=CC=D8=D6=D6=CA=D4=BC=C1=B5=C4=D0=E8=C7=F3=CC=E1=B9= =A9=B7=FE=CE=F1=A1=A3
=20
=20 =A1=B7=A1=B7=CE=D2=C3=C7=D1=B0=C7=F3=B9=FA= =C4=DA=BB=AF=D1=A7=CA=D4=BC=C1=C9=FA=B2=FA=B3=A7=BC=D2
=20 =A1=B7=A1=B7=C3=E2=B7=D1=CB=F7=C8=A1=C3=C0= =B9=FAstrem=BB=AF=D1=A7=CA=D4=BC=C1=B9=AB=CB=BE=B2=FA=C6=B7=C4=BF=C2=BC =20=
=20 =20 =20 =20 =20 =20 = =20 =20 =20 =20 =20 =20 =20 =20 =20 =20 = =20 =20 =20 =20 =20 =20 =20 =20 =20

=C3=C0=B9=FA=BF=AD= =C3=C0=CC=D8=BB=AF=D1=A7=CA=D4=BC=C1

=C3=C0=B9=FA=BF=AD=C3=C0=CC=D8=B9=AB= =CB=BE=B3=C9=C1=A2=D3=DA1990=A3=AC=BB=F1=B5=C3=B9=FD=B6=E0=CF=EE=C3=C0= =B9=FASBIR=D1=D0=B7=A2=CF=EE=C4=BF=A3=AC=BC=C3=C9=ED=D3=DA=C8=DC=BD=BA=A3=AD= =C4=FD=BD=BA=A3=A8Sol-Gel=A3=A9=BA=CD=B9=A6=C4=DC=D0=D4=D0=C2=B2=C4=C1=CF=D1= =D0=B7=A2=C1=EC=D3=F2=B5=C4=C7=B0=C1=D0=A1=A3=BF=AD=C3=C0=CC=D8=B5=C4=BB=AF= =D1=A7=CA=D4=BC=C1=C4=BF=C2=BC=A3=A8Chemat =20 catalog =A3=A9=B0=FC=C0=A8700 =B6=E0=D6=D6=BB=AF=D1=A7=CA= =D4=BC=C1=A3=AC=B2=A2=BF=AA=B7=A2=C1=CB=B6=E0=D6=D6sol-gel =C1=EC=D3=F2=B5= =C4=B2=FA=C6=B7=BC=B0=D6=C6=C4=A4=C9=E8=B1=B8=A1=A3

=20 =20 =20 =20 =20

=C0=FD=C8=E7=A3=BA=
=20 =A1=A4 =D3=C3=D3=DA=D6=C6=B1=B8Al2O3, In2O3, SnO2,= ATO, ITO, BaTiO3, PbTiO3, PZT, =20 =BA=CDZrO2 =2E =B5=C8=B5=C4=C7=B0=CC=E5=C8=DC=D2=BA=
=20 =A1=A4 =CE=C8=B6=A8=B5=C4=BD=F0=CA=F4=D1=F5=BB=AF=CE= =EF=C8=E9=D2=BA
=20 =A1=A4 =B3=AC=CF=B8=B7=DB
=20 =A1=A4 =BB=B7=B1=A3=D0=CD=A3=A8=CB=AE=BB=F9=A3=A9=B5= =C4=BD=F0=CA=F4=B1=ED=C3=E6=B4=A6=C0=ED=C8=DC=D2=BA=A3=BAAL9201 =A3=A8=C2=C1= =BA=CF=BD=F0=B1=ED=C3=E6=A3=A9=A3=ACTi9601 =A3=A8=EE=D1=B1=ED=C3=E6=A3=A9 =

<= /td>=20

=20

=C3=C0=B9=FAStrem=BB=AF=D1=A7=CA=D4=BC=C1=B9=AB=CB=BE=A3=A8Strem =20 Chemicals, Inc=2E=A3=A9=BC=F2=BD=E9

Strem C= hemicals, =20 Inc=2E =BD=A8=C1=A2=D3=DA1964=C4=EA=A3=AC=C9=FA=B2=FA=BA= =CD=CF=FA=CA=DB=B8=F7=D6=D6=BB=AF=D1=A7=CA=D4=BC=C1=BA=CD=B8=DF=B4=BF=CA=D4= =BC=C1=A3=AC=D6=F7=D2=AA=D3=A6=D3=C3=C1=EC=D3=F2=D3=D0=D6=C6=D2=A9=A1=A2=B2= =C4=C1=CF=A1=A2=CE=A2=B5=E7=D7=D3=A1=A2=CA=AF=BB=AF=B5=C8=A1=A3=D4=DA=C3=C0= =B9=FA=B5=C4=D3=C3=BB=A7=B0=FC=C0=A8=D1=A7=CA=F5=BB=FA=B9=B9=A1=A2=B9=A4=B3= =A7=C6=F3=D2=B5=BA=CD=D5=FE=B8=AE=CA=B5=D1=E9=CA=D2=A1=A3=B9=AB=CB=BE=BA=CD= =BA=CB=D0=C4=BB=FA=B9=B9=CE=BB=D3=DANewburyport=A3=A8=C0=EBBoston =20 30=B9=AB=C0=EF=A3=A9=A3=AC=D5=BC=B5=D8=C3=E6=BB=FD2600=C6= =BD=B7=BD=B9=AB=C0=EF=A3=BB=C5=B7=D6=DE=B5=C4=BA=CB=D0=C4=BB=FA=B9=B9=CE=BB= =D3=DA=B7=A8=B9=FA=B5=C4Bischheim=A1=A3Strem=B9=AB=CB=BE=B5=C4=B2=FA=C6=B7= =D2=B2=B2=BB=B6=CF=C0=A9=D5=B9=A1=A3=BF=AD=C3=C0=CC=D8=B9=AB=CB=BE=D3=EBSt= rem=B9=AB=CB=BE=D4=DA=C3=B3=D2=D7=BA=CD=D1=D0=B7=A2=B7=BD=C3=E6=D2=D1=D3=D0=

=B6=E0=C4=EA=B5=C4=BA=CF= =D7=F7=A3=AC=CF=E0=D0=C5=D5=E2=B4=CE=D6=D0=B9=FA=B5=C4=BA=CF=D7=F7=D4=DA=B9= =E3=B4=F3=D3=C3=BB=A7=B5=C4=D6=A7=B3=D6=CF=C2=BB=E1=C8=A1=B5=C3=B3=C9=B9=A6= =A1=A3

Strem=D6=F7=D2=AA=B2=FA=C6=B7(=B5=E3=BB=F7=BD=F8=C8=EB=A3=A9

=20 =20

=20

=20
=20
=20
=20
=20
=20
=20
=20

=20

=20
=20
=20
=20
=20
=20
=20
=20
=20 <= img src=3D"http://www=2Eelabmarket=2Ecom/emailzz/2002-1/Marimages/fisher=2E= gif" width=3D"127" height=3D"26" border=3D"0"> =20
=20
=20
=20

=20 =20 =09=09=09=20 =20 =20 =20 =20 =20 =20 =20 =20 =20 =20

=BF=CD=BB=A7=D0=E8=C7=F3

=D0=D5=C3=FB=A3=BA= =20 =20

=D3=CA=CF=E4=A3=BA= =20 =20

= =D0=E8=C7=F3=A3=BA =20

</textare=
a>=20
                </td>=20
              </tr>=20
              <tr> =20
                <td bgcolor=3D"#FFFFFF" class=3D"black-s" valign=3D"middle=
" align=3D"center"> =20
                  <input type=3D"submit" value=3D"=CC=E1=BD=BB" name=3D"B1=
" style=3D"border-style: solid; border-width: 1">=20
=09=09=09=09  <input type=3D"reset" value=3D"=D6=D8=D0=B4" name=3D"B2" sty=
le=3D"border-style: solid; border-width: 1"> =20
                </td>=20
              </tr></form> =20
            </table>=20
            <p>  </p>=20
            <p>  </p>=20
            <p> <br>=20
              <br>=20
            </p>=20
            </td>=20
        </tr>=20
      </table>=20
    </td>=20
    <td height=3D"10" bgcolor=3D"#000066" align=3D"center" valign=3D"middl=
e"> </td>=20
  </tr>=20
  <tr> =20
    <td height=3D"10" bgcolor=3D"#000066" align=3D"center" valign=3D"middl=
e" colspan=3D"3"><span class=3D"white-s"><br>=20
      --<a href=3D"http://www=2Eelabmarket=2Ecom/about=2Easp" target=3D"_b=
lank" class=3D"white-s">=B9=D8=D3=DA=CE=D2=C3=C7</a>--<a href=3D"mailto:we=
bmaster at elabmarket=2Ecom" class=3D"white-s">=C1=AA=CF=B5=CE=D2=C3=C7</a>--=
<a href=3D"http://www=2Eelabmarket=2Ecom/hyzx/zc/tk=2EASP" target=3D"_blan=
k" class=3D"white-s">=D7=A2=B2=E1=D0=C2=D3=C3=BB=A7</a>--<a href=3D"ad=2Eh=
tm" target=3D"_blank" class=3D"white-s">=B9=E3=B8=E6=D2=B5=CE=F1</a>--<br>=
=20
      Copyright (C) 2001=2Eelabmarket=2Ecom=2E All Rights Reserved<br>=20
      =A1=EF=BF=AD=C3=C0=CC=D8=BF=C6=D1=A7=C6=F7=B2=C4=CD=F8=D5=BE=B0=E6=C8=
=A8=CB=F9=D3=D0=A1=EF <br>=20
      </span> </td>=20
  </tr>=20
</table>=20
</body>=20
</html>=20

------=_NextPart_84815C5ABAF209EF376268C8--

From info at researchnetwork.com  Thu Mar  7 23:30:17 2002
From: info at researchnetwork.com (ResearchNetwork.com)
Date: 8 Mar 2002 04:30:17 -0000
Subject: pending/1069: Research Network Job Site
Message-ID: <1015561817.42177.qmail@ech>

>Number:         1069
>Category:       pending
>Synopsis:       Research Network Job Site
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Thu Mar  7 23:03:00 EST 2002
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Expand Your Universe on the Research Network.

Research Network is a job site devoted exclusively to professional Researchers and companies who need Researchers.  It doesn't matter what industry you specialize in.  Research Network encompasses a broad spectrum of industries and we continue to add more every day.  For a comprehensive list of industries we work in like Pharmaceutical Research, Marketing Research, Clinical Research, Financial Research, Health Care Research, (to name a few), log on to http://www.researchnetwork.com and discover the infinite 
possibilities.

If your an Employer, stop wasting your valuable time by posting your jobs on generalized job sites that inundate you with inappropriate candidates.  If your looking for Scientists, Project Managers, Analysts, Statisticians, Clinical Researchers, Engineers, Planners, Developers, Upper Level Management within a Research function, (to name a few), go to the source and get your research job posting in front of over 1/2 million researchers on our Network.  Click on the link below to find the exact research talent you need.

http://www.researchnetwork.com/emplogin.cfm

If your a professional Researcher and wish to be considered for positions by employers on our network, click on the link below to join the network.

http://www.researchnetwork.com

Expand Your Universe

_______________________________________________________________________
Powered by List Builder
To unsubscribe follow the link:
http://lb.bcentral.com/ex/manage/subscriberprefs?customerid=20467&subid=EDD09C6F476BA01A&msgnum=1

From nijsure at nrl.csci.unt.edu  Sat Mar  9 15:21:20 2002
From: nijsure at nrl.csci.unt.edu (nijsure@nrl.csci.unt.edu)
Date: Sat, 09 Mar 2002 14:21:20 -0600
Subject: pending/1070: request for a customer id
Message-ID: <E16jnLE-000490-00@kerb.nrl.csci.unt.edu>

>Number:         1070
>Category:       pending
>Synopsis:       request for a customer id
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Sat Mar  9 15:22:01 EST 2002
>Last-Modified:
>Originator:     Sandeep G. Nijsure
>Organization:
	
>Release:        krb5-1.2.3
>Environment:
	
System: Linux kerb 2.2.9 #1 Fri May 21 17:32:59 CDT 1999 i586 unknown
Architecture: i586

>Description:
	
>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:

From nijsure at nrl.csci.unt.edu  Sat Mar  9 15:21:28 2002
From: nijsure at nrl.csci.unt.edu (nijsure@nrl.csci.unt.edu)
Date: Sat, 09 Mar 2002 14:21:28 -0600
Subject: pending/1071: request for a customer id
Message-ID: <E16jnLM-00049n-00@kerb.nrl.csci.unt.edu>

>Number:         1071
>Category:       pending
>Synopsis:       request for a customer id
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Sat Mar  9 15:22:02 EST 2002
>Last-Modified:
>Originator:     Sandeep G. Nijsure
>Organization:
	
>Release:        krb5-1.2.3
>Environment:
	
System: Linux kerb 2.2.9 #1 Fri May 21 17:32:59 CDT 1999 i586 unknown
Architecture: i586

>Description:
	
>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:

From Riki at excelcom.co.id  Mon Mar 11 03:37:05 2002
From: Riki at excelcom.co.id (Riki Hendriana)
Date: Mon, 11 Mar 2002 15:37:05 +0700
Subject: pending/1072: telnet client
Message-ID: <C7C379356CB1D411812D00508BCF0C2A0B11C133@e-mail.excelcom.co.id>

>Number:         1072
>Category:       pending
>Synopsis:       telnet client
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Mon Mar 11 03:53:00 EST 2002
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Dear Sir or Madam,

Sorry for inconvenient of my silly question, but I can't ask other.

I am trying to build telnet client application to Mandrake Linux, the
problem is that

the server gives me :

FF FA 25 01 02 06 02 02 02 FF F0 (what is meant by 02 06 02 02 02 0 ?)
I can't convert the meaning from RFC 2942 :
  IAC SB AUTHENTICATION SEND
  KERBEROS_V5 CLIENT|MUTUAL
  KERBEROS_V5 CLIENT|ONE_WAY IAC
  SE

what should I give to the server ( I can not implement the below RFC
procedure ):

IAC SB AUTHENTICATION NAME
       "pete" IAC SE
       IAC SB AUTHENTICATION IS
       KERBEROS_V5 CLIENT|MUTUAL AUTH
       <KRB_AP_REQ message> IAC SE

my implementation is (without KRB_AP_REQ message), I have an account as
"riki":

FF FA 25 03 "riki" FF F0
FF FA 25 0 02 06 02 02 02 FF F0

but rejected by the server, it sends me : FF FA 25 02 02 06 01 FF F0

and what is the value of "what is KRB_AP_REQ message" and what is kerberos
ticket in this case ?
where can I find the value ?

Thank You very much for help.

Best Regards
Riki

From ali_m_000 at hotmail.com  Wed Mar 13 06:02:06 2002
From: ali_m_000 at hotmail.com (Ali M)
Date: Wed, 13 Mar 2002 11:02:06 +0000
Subject: pending/1073: telnet core dumps with Windows 2000 KDC
Message-ID: <F51MdzUMkVxoNJ0Dla7000156b4@hotmail.com>

>Number:         1073
>Category:       pending
>Synopsis:       telnet core dumps with Windows 2000 KDC
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Wed Mar 13 06:03:00 EST 2002
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Submitter-Id:	net
Originator:	Super-User
Organization:
Confidential:	no
Synopsis:	Telnet dies if TGT Authorization-Data field too large
Severity:	non-critical
Priority:	low
Category:	krb5-appl
Class:		change-request
Release:	krb5-1.2.3
Environment:
System: SunOS secsol5 5.6 Generic_105181-21 sun4u sparc SUNW,Ultra-5_10
Architecture: sun4

Description:

When using MIT kerberos against a Windows 2000 KDC, obtaining a TGT
for a user that is a member of many Windows groups causes the
Authorization-Data field of the TGT to become very large. Telnet contains
2048 byte buffers for the network output ring and also as a work buffer
in libtelnet/kerberos5.c When the TGT is too large, the buffer in
kerberos5.c overflows and overwrites the variables declared after it,
particularly the krb5_context structure - a core dump soon follows!

How-To-Repeat:

Create a user account at the Win2K KDC and make it a member of many
groups - 10 to 12 is usually sufficient.

Fix:
	Personally I increased the size of the static buffer in
libtelnet/kerberos5.c line 99: static unsigned char str_data[2048]
and the network output ring buffer
telnet/network.c line 56: unsigned char netobuf[2*BUFSIZ],
to be big enough to accomodate the largest expected user account on the
company's network.

I would recommend that any future enhancement to telnet would use a
dynamically allocated buffer in kerberos5.c and that there be some
way of flushing the ring buffer so that a large TGT can be processed
in a loop, since the TGT size is not known at the time the ring buffer
is allocated.

_________________________________________________________________
Get your FREE download of MSN Explorer at http://explorer.msn.com/intl.asp.

From leo at strike.wu-wien.ac.at  Thu Mar 21 13:22:46 2002
From: leo at strike.wu-wien.ac.at (leo@strike.wu-wien.ac.at)
Date: Thu, 21 Mar 2002 19:22:46 +0100
Subject: krb5-clients/1075: kpasswd with heimdal kdc and preauthentication
Message-ID: <200203211822.g2LIMkg26147@spare.wu-wien.ac.at>

>Number:         1075
>Category:       krb5-clients
>Synopsis:       kpasswd fails to decode ticket when using preauthentication and a heimdal kdc
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    krb5-unassigned
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Thu Mar 21 13:23:00 EST 2002
>Last-Modified:
>Originator:     Alexander Bergolth
>Organization:
Vienna University of Economy and Business Administration
>Release:        krb5-1.2.2
>Environment:
   Linux, heimdal KDC, kadmin/changepw has preauth flag set
System: Linux spare.wu-wien.ac.at 2.4.9-21SGI_XFS_1.0.2 #1 Fri Jan 25 14:53:36 CET 2002 i686 unknown
Architecture: i686

>Description:
When I'm trying to use MIT kpasswd to change a password on a Heimdal server, I'm getting the 
following error:

$ /usr/kerberos/bin/kpasswd leo
Password for leo at WU-WIEN.AC.AT:
/usr/kerberos/bin/kpasswd: Password incorrect while getting initial ticket

A packet dump using ethereal shows the following sequence:
(The frame number counts the packets that are sent over the net as
counted by ethereal)

1)  Frame 1: kpasswd sends AS-REQ for kadmin/changepw
2)  Frame 2: server replies preauth required
3)  kpasswd prompts for a password
4)  Frame 3: kpasswd sends AS-REQ for kadmin/changepw using
    preauthentication
5)  Frame 4: server responds with the ticket (type: des3-cbc-sha1)
6)  Frame 5: kpasswd sends another AS-REQ for kadmin/changepw, now again
    without preauth!
7)  Frame 6: server replies preauth required
8)  Frame 7: kpasswd sends AS-REQ for kadmin/changepw using
    preauthentication
9)  server again replies with a ticket
10) kpasswd prints the above error

I've debugged kpasswd and found out that it expects des-cbc-md5 in decrypt_as_reply as 
encoding but it gets a des3-cbc-sha1 encoded ticket instead. (In krb5_c_decrypt key->enctype 
is 3 (=ENCTYPE_DES_CBC_MD5) and input->enctype is 16 (=ENCTYPE_DES3_CBC_SHA1).)

(krb5_do_preauth returned ENCTYPE_DES_CBC_MD5 as_key and etype)

However, the request contained three encodings: des3-cbc-sha1, des-cbc-md5 and des-cbc-crc 
(the default if default_tkt_enctypes is not set). Hence I believe that it is legal to use
des3-cbc-sha1.?

The full dump in pcap-format for reading with ethereal can be found at
   http://leo.kloburg.at/krb5/kpasswd-mit.dump

Using heimdal's kpasswd works fine. (It starts to communicate with
kpasswdd after step 5).
MIT kpasswd also works if the preauth flag is cleared from kadmin/changepw.

Additional information:

Principal: leo at WU-WIEN.AC.AT
       Principal expires: never
        Password expires: never
    Last password change: never
         Max ticket life: 1 day 1 hour
      Max renewable life: unlimited
                    Kvno: 10
                   Mkvno: 0
                  Policy: none
   Last successful login: never
       Last failed login: never
      Failed login count: 0
           Last modified: 2002-03-19 17:48:59 UTC
                Modifier: leo at WU-WIEN.AC.AT
              Attributes:
Keytypes(salttype[(salt-value)]): des-cbc-md5(pw-salt()), des-cbc-md4(pw-salt()), 
des-cbc-crc(pw-salt()), des3-cbc-sha1(pw-salt), des-cbc-md5(pw-salt), des-cbc-md4(pw-salt), 
des-cbc-crc(pw-salt)

Principal: kadmin/changepw at WU-WIEN.AC.AT
       Principal expires: never
        Password expires: never
    Last password change: never
         Max ticket life: 5 minutes
      Max renewable life: 5 minutes
                    Kvno: 1
                   Mkvno: 0
                  Policy: none
   Last successful login: never
       Last failed login: never
      Failed login count: 0
           Last modified: 2002-03-15 11:27:57 UTC
                Modifier: kadmin/admin at WU-WIEN.AC.AT
              Attributes: pwchange-service, requires-pre-auth, disallow-proxiable, 
disallow-renewable, disallow-tgt-based, disallow-forwardable, disallow-postdated
Keytypes(salttype[(salt-value)]): des-cbc-crc(pw-salt), des-cbc-md4(pw-salt), 
des-cbc-md5(pw-salt), des3-cbc-sha1(pw-salt)

KDC log:

Mar 19 18:49:10 spare kdc[4206]: AS-REQ leo at WU-WIEN.AC.AT from IPv4:137.208.89.101 for 
kadmin/changepw at WU-WIEN.AC.AT
Mar 19 18:49:10 spare kdc[4206]: No PA-ENC-TIMESTAMP -- leo at WU-WIEN.AC.AT
Mar 19 18:49:10 spare kdc[4206]: sending 270 bytes to IPv4:137.208.89.101
Mar 19 18:49:12 spare kdc[4206]: AS-REQ leo at WU-WIEN.AC.AT from IPv4:137.208.89.101 for 
kadmin/changepw at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Looking for pa-data -- leo at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Pre-authentication succeded -- leo at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Using des3-cbc-sha1/des3-cbc-sha1
Mar 19 18:49:12 spare kdc[4206]: sending 578 bytes to IPv4:137.208.89.101
Mar 19 18:49:12 spare kdc[4206]: AS-REQ leo at WU-WIEN.AC.AT from IPv4:137.208.89.101 for 
kadmin/changepw at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: No PA-ENC-TIMESTAMP -- leo at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: sending 270 bytes to IPv4:137.208.89.101
Mar 19 18:49:12 spare kdc[4206]: AS-REQ leo at WU-WIEN.AC.AT from IPv4:137.208.89.101 for 
kadmin/changepw at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Looking for pa-data -- leo at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Pre-authentication succeded -- leo at WU-WIEN.AC.AT
Mar 19 18:49:12 spare kdc[4206]: Using des3-cbc-sha1/des3-cbc-sha1
Mar 19 18:49:12 spare kdc[4206]: sending 578 bytes to IPv4:137.208.89.101

>How-To-Repeat:
Use a Heimdal KDC (maybe it also works with a MIT KDC?), turn on requires-pre-auth
and try to change a password using MIT kpasswd.
>Fix:
A dirty workaround is to turn off preauthentication.
>Audit-Trail:
>Unformatted:

From demetri at mouratis.org  Mon Mar 25 14:22:50 2002
From: demetri at mouratis.org (Demetri S. Mouratis)
Date: Mon, 25 Mar 2002 13:22:50 -0600 (CST)
Subject: pending/1077: Compiling krb5-1.2.4 under Mac OS X 10.1.3
Message-ID: <20020325192250.19DC739A81@hobbit.mouratis.org>

>Number:         1077
>Category:       pending
>Synopsis:       Compiling krb5-1.2.4 under Mac OS X 10.1.3
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Mon Mar 25 14:23:00 EST 2002
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
Hi gang,

I've been merrily using krb5-1.2.1 from the Mac OS X shell for over a year, 
and I just tried to compile 1.2.4 with no success.  I went back to 1.2.1 and 
found that it no longer compiles, so I'm thinking the Mac OS 10.1.x upgrade
might have changed something.

Do you all know anybody compiling krb5 under 10.1.3 or so?  I've attached a
small segment of the compile below.

Thanks,
...Demetri

making all in util/profile...
if cmp profile.h \
../../include/profile.h >/dev/null 2>&1; then :; \
else \
        (set -x; rm -f ../../include/profile.h; \
         cp profile.h ../../include/profile.h) ; \
fi
cc -L../../lib -o test_parse test_parse.o prof_tree.o prof_file.o prof_parse.o prof_get.o prof_set.o prof_err.o prof_init.o -lcom_err 
/usr/bin/ld: Undefined symbols:
__et_list
make[2]: *** [test_parse] Error 1
make[1]: *** [all-recurse] Error 1
make: *** [all-recurse] Error 1

From willf at alton.central.sun.com  Mon Mar 25 17:46:07 2002
From: willf at alton.central.sun.com (William Fiveash)
Date: Mon, 25 Mar 2002 16:46:07 -0600 (CST)
Subject: krb5-misc/1078: des3-hmac-sha1 should be renamed to des3-cbc-hmac-sha1-kd
Message-ID: <200203252246.g2PMk7v04264@alton.central.sun.com>

>Number:         1078
>Category:       krb5-misc
>Synopsis:       des3-hmac-sha1 should be renamed to des3-cbc-hmac-sha1-kd
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    krb5-unassigned
>State:          open
>Class:          change-request
>Submitter-Id:   unknown
>Arrival-Date:   Mon Mar 25 17:47:00 EST 2002
>Last-Modified:
>Originator:     William Fiveash
>Organization:
Sun Microsystems
>Release:        krb5-1.2.4
>Environment:
	
System: SunOS alton 5.8 Generic_108528-09 sun4u sparc SUNW,Ultra-5_10
Architecture: sun4

>Description:

I've noticed that the newer MIT Kerberos distributions support a
des3-hmac-sha1 enctype.  (Note this is associated with the

#define ENCTYPE_DES3_CBC_SHA1   0x0010

found in krb5.h).  The draft-ietf-krb-wg-crypto-00.txt defines a
des3-cbc-hmac-sha1-kd enctype with value 16 and also mentions a
des3-cbc-sha1 enctype with value 7.  Is MIT going to change the name
of their des3-hmac-sha1 enctype used in the various config files to
des3-cbc-hmac-sha1-kd to conform to draft-ietf-krb-wg-crypto-00.txt?
Will the ENCTYPE_DES3_CBC_SHA1 define be renamed to something that
more closely resembles the des3-cbc-hmac-sha1-kd name as well?

>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:

From emailing at calltoaction.com.ar  Tue Mar 26 10:47:39 2002
From: emailing at calltoaction.com.ar (SCI E-mailing)
Date: Tue, 26 Mar 2002 12:47:39 -0300
Subject: pending/1079: Conozca SCI E-mailing
Message-ID: <411088-220023226154739902@calltoaction.com.ar>

>Number:         1079
>Category:       pending
>Synopsis:       Conozca SCI E-mailing
>Confidential:   yes
>Severity:       serious
>Priority:       medium
>Responsible:    gnats-admin
>State:          open
>Class:          sw-bug
>Submitter-Id:   unknown
>Arrival-Date:   Tue Mar 26 10:43:00 EST 2002
>Last-Modified:
>Originator:
>Organization:
>Release:
>Environment:
>Description:
>How-To-Repeat:
>Fix:
>Audit-Trail:
>Unformatted:
------=_NextPart_84815C5ABAF209EF376268C8
Content-type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

------=_NextPart_84815C5ABAF209EF376268C8
Content-Type: text/html; charset=US-ASCII
Content-Transfer-Encoding: quoted-printable

<head>
<meta http-equiv=3DContent-Type content=3D"text/html; charset=3Diso-8859-1=
">
<meta name=3DProgId content=3DWord=2EDocument>
<meta name=3DGenerator content=3D"Microsoft Word 9">
<meta name=3DOriginator content=3D"Microsoft Word 9">
<link rel=3DFile-List href=3D"=2E/83_files/filelist=2Exml">
<link rel=3DEdit-Time-Data href=3D"=2E/83_files/editdata=2Emso">

<title>emaling</title>

<style>

</style>

<table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=3D'=
width:100=2E0%;
 mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
 <tr>
  <td style=3D'background:black;padding:0in 0in 0in 0in'>
  <p class=3DMsoNormal> </p>
  </td>
 </tr>
 <tr background=3D"gif/pixelbco=2Egif">
  <td valign=3Dtop style=3D'padding:0in 0in 0in 0in'>
  <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=3D=
'width:100=2E0%;
   mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
   <tr>
    <td style=3D'padding:0in 0in 0in 0in'>
    <p class=3DMsoNormal><img width=3D1 height=3D1 id=3D"_x0000_i1025"
    src=3D"gif\pixel=2Egif"></p>
    </td>
   </tr>
  </table>
  <p class=3DMsoNormal><o:p></o:p></p>
  </td>
 </tr>
 <tr>
  <td valign=3Dtop style=3D'padding:0in 0in 0in 0in'
  background=3D"http://200=2E69=2E192=2E45/images/110_pixellogo=2Egif">
  <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=3D=
'width:100=2E0%;
   mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
   <tr style=3D'height:10=2E5pt'>
    <td width=3D"20%" style=3D'width:20=2E0%;padding:0in 0in 0in 0in;heigh=
t:10=2E5pt'>
    <p class=3DMsoNormal><![if !supportEmptyParas]> <![endif]><span
    style=3D'font-size:11=2E0pt;mso-bidi-font-size:12=2E0pt'><o:p></o:p></=
span></p>
    </td>
    <td width=3D"63%" style=3D'width:63=2E0%;padding:0in 0in 0in 0in;heigh=
t:10=2E5pt'>
    <p class=3DMsoNormal style=3D'mso-line-height-alt:10=2E5pt'><img width=
=3D99
    height=3D88 id=3D"_x0000_i1026"
    src=3D"http://200=2E69=2E192=2E45/images/110_logoeste=2Egif"><img widt=
h=3D99 height=3D88
    id=3D"_x0000_i1027" src=3D"http://200=2E69=2E192=2E45/images/110_fotop=
rimera=2Egif"><img
    width=3D148 height=3D88 id=3D"_x0000_i1028"
    src=3D"http://200=2E69=2E192=2E45/images/110_fot2a=2Egif"><img width=3D=
152 height=3D88
    id=3D"_x0000_i1029" src=3D"http://200=2E69=2E192=2E45/images/110_fot3a=
=2Egif"><img
    width=3D142 height=3D88 id=3D"_x0000_i1030"
    src=3D"http://200=2E69=2E192=2E45/images/110_fot4a=2Egif"><o:p></o:p><=
/p>
    </td>
    <td width=3D"17%" style=3D'width:17=2E0%;padding:0in 0in 0in 0in;heigh=
t:10=2E5pt'
    background=3D"http://200=2E69=2E192=2E45/images/110_pixelfoto2=2Egif">=

<p class=3DMsoNormal><![if !supportEmptyParas]> <![endif]><span
    style=3D'font-size:11=2E0pt;mso-bidi-font-size:12=2E0pt'><o:p></o:p></=
span></p>
    </td>
   </tr>
  </table>
  <p class=3DMsoNormal><o:p></o:p></p>
  </td>
 </tr>
 <tr>
  <td style=3D'background:black;padding:0in 0in 0in 0in'>
  <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=3D=
'width:100=2E0%;
   mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
   <tr style=3D'height:3=2E75pt'>
    <td valign=3Dtop style=3D'background:#334653;padding:0in 0in 0in 0in;
    height:3=2E75pt'>
    <p class=3DMsoNormal style=3D'mso-line-height-alt:3=2E75pt'><img width=
=3D1
    height=3D1 id=3D"_x0000_i1031" src=3D"gif\transparente=2Egif"></p>
    </td>
   </tr>
   <tr style=3D'height:52=2E5pt'>
    <td style=3D'background:#547587;padding:0in 0in 0in 0in;height:52=2E5p=
t'>
    <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><b
    onstart=3D"MM_openBrWindow('200=2E69=2E19545/flash/flsh=2Easp?formid=3D=
110=2E','SCI','width=3D600,height=3D350')"><span
    lang=3DES-MX style=3D'font-family:Arial;color:white;mso-ansi-language:=
ES-MX'>SCI
    emailing todo el poder audiovisual en su casilla de correo<br>
    <br>
    </span></b><span lang=3DES-MX style=3D'font-size:7=2E5pt;font-family:A=
rial;
    color:white;mso-ansi-language:ES-MX'>Si no puede visualizar este comer=
cial,
    haga un </span><span style=3D'font-size:7=2E5pt;font-family:Arial;colo=
r:white'><a
    href=3D"http://200=2E69=2E192=2E45/emailtemplates/83=2Ehtm"><span lang=
=3DES-MX
    style=3D'mso-ansi-language:ES-MX'>click aqu=ED</span></a></span><span
    style=3D'font-size:7=2E5pt;font-family:Arial;color:white;mso-ansi-lang=
uage:
    ES-MX'> </span><span lang=3DES-MX style=3D'mso-ansi-language:ES-MX'><o=
:p></o:p></span></p>
    </td>
   </tr>
   <tr style=3D'height:3=2E75pt'>
    <td valign=3Dtop style=3D'background:#334653;padding:0in 0in 0in 0in;
    height:3=2E75pt'>
    <p class=3DMsoNormal style=3D'mso-line-height-alt:3=2E75pt'><img borde=
r=3D0
    width=3D10 height=3D1 id=3D"_x0000_i1032" src=3D"gif\transparente=2Egi=
f"></p>
    </td>
   </tr>
  </table>
  <p class=3DMsoNormal><span style=3D'display:none;mso-hide:all'><![if !su=
pportEmptyParas]> <![endif]><o:p></o:p></span></p>
  <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=3D=
'width:100=2E0%;
   mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
   <tr style=3D'height:132=2E75pt'>
    <td style=3D'padding:0in 0in 0in 0in;height:132=2E75pt'>
    <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><![if =
!supportEmptyParas]> <![endif]><o:p></o:p></p>
    <div align=3Dcenter>
    <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D590 style=3D=
'width:442=2E5pt;
     mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
     <tr style=3D'height:58=2E5pt'>
      <td style=3D'padding:0in 0in 0in 0in;height:58=2E5pt'>
      <p class=3DMsoNormal><span lang=3DES-MX style=3D'font-size:10=2E0pt;=
font-family:
      Arial;color:white;mso-ansi-language:ES-MX'>A trav=E9s de nuestra
      combinaci=F3n =FAnica de creatividad, permission marketing y una pot=
ente
      plataforma tecnol=F3gica, ayudamos a las empresas a crear exitosas C=
ampa=F1as
      de Marketing Directo on line de alta respuesta para captar clientes =
y
      profundizar en la relaci=F3n con los mismos=2E <br>
      Brindamos una completa gama de soluciones que lo llevan "de la
      estrategia a la acci=F3n" de alcanzar resultados superiores=2E<=
/span><span
      lang=3DES-MX style=3D'mso-ansi-language:ES-MX'><o:p></o:p></span></p=
>
      </td>
     </tr>
    </table>
    </div>
    <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><span =
lang=3DES-MX
    style=3D'display:none;mso-hide:all;mso-ansi-language:ES-MX'><![if !sup=
portEmptyParas]> <![endif]><o:p></o:p></span></p>
    <div align=3Dcenter>
    <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=
=3D'width:100=2E0%;
     mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
     <tr style=3D'height:1=2E5pt'>
      <td width=3D"21%" style=3D'width:21=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><span lan=
g=3DES-MX
      style=3D'mso-ansi-language:ES-MX'> <o:p></o:p></span></p>
      </td>
      <td width=3D"1%" valign=3Dbottom style=3D'width:1=2E0%;padding:0in 0=
in 0in 0in;
      height:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D15 height=3D10 id=3D"_x0000_i1033"
      src=3D"http://200=2E69=2E192=2E45/images/110_curva1=2Egif"></p>
      </td>
      <td width=3D"55%" style=3D'width:55=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D550 height=3D1 id=3D"_x0000_i1034" src=3D"gif\pixelbco=2Egif=
"></p>
      </td>
      <td width=3D"1%" valign=3Dbottom style=3D'width:1=2E0%;padding:0in 0=
in 0in 0in;
      height:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D15 height=3D10 id=3D"_x0000_i1035"
      src=3D"http://200=2E69=2E192=2E45/images/110_curva2=2Egif"></p>
      </td>
      <td width=3D"22%" style=3D'width:22=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'> </p=
>
      </td>
     </tr>
     <tr>
      <td width=3D"21%" style=3D'width:21=2E0%;padding:0in 0in 0in 0in'>
      <p class=3DMsoNormal> </p>
      </td>
      <td width=3D"1%" rowspan=3D2 style=3D'width:1=2E0%;padding:0in 0in 0=
in 0in'>
      <p class=3DMsoNormal><img border=3D0 width=3D1 height=3D60 id=3D"_x0=
000_i1036"
      src=3D"gif\pixelbco=2Egif"></p>
      </td>
      <td width=3D"55%" rowspan=3D2 style=3D'width:55=2E0%;padding:0in 0in=
 0in 0in'>
      <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><b><=
span
      lang=3DES-MX style=3D'font-size:10=2E0pt;font-family:Arial;color:whi=
te;
      mso-ansi-language:ES-MX'>Como cliente de SCI usted puede tomar venta=
ja de
      <br>
      nuestras soluciones individualmente o de forma <br>
      combinada dependiendo de sus necesidades espec=EDficas=2E </span></b=
><span
      lang=3DES-MX style=3D'mso-ansi-language:ES-MX'><o:p></o:p></span></p=
>
      </td>
      <td width=3D"1%" rowspan=3D2 style=3D'width:1=2E0%;padding:0in 0in 0=
in 0in'>
      <p class=3DMsoNormal align=3Dright style=3D'text-align:right'><img b=
order=3D0
      width=3D1 height=3D60 id=3D"_x0000_i1037" src=3D"gif\pixelbco=2Egif"=
></p>
      </td>
      <td width=3D"22%" style=3D'width:22=2E0%;padding:0in 0in 0in 0in'>
      <p class=3DMsoNormal> </p>
      </td>
     </tr>
     <tr style=3D'height:31=2E5pt'>
      <td width=3D"21%" style=3D'width:21=2E0%;padding:0in 0in 0in 0in;hei=
ght:31=2E5pt'>
      <p class=3DMsoNormal> </p>
      </td>
      <td width=3D"22%" style=3D'width:22=2E0%;padding:0in 0in 0in 0in;hei=
ght:31=2E5pt'>
      <p class=3DMsoNormal> </p>
      </td>
     </tr>
     <tr style=3D'height:1=2E5pt'>
      <td width=3D"21%" style=3D'width:21=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'> </p=
>
      </td>
      <td width=3D"1%" valign=3Dtop style=3D'width:1=2E0%;padding:0in 0in =
0in 0in;
      height:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D15 height=3D9 id=3D"_x0000_i1038"
      src=3D"http://200=2E69=2E192=2E45/images/110_curva4=2Egif"></p>
      </td>
      <td width=3D"55%" style=3D'width:55=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D550 height=3D1 id=3D"_x0000_i1039" src=3D"gif\pixelbco=2Egif=
"></p>
      </td>
      <td width=3D"1%" valign=3Dtop style=3D'width:1=2E0%;padding:0in 0in =
0in 0in;
      height:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D15 height=3D10 id=3D"_x0000_i1040"
      src=3D"http://200=2E69=2E192=2E45/images/110_curva3=2Egif"></p>
      </td>
      <td width=3D"22%" style=3D'width:22=2E0%;padding:0in 0in 0in 0in;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'> </p=
>
      </td>
     </tr>
     <tr style=3D'height:23=2E25pt'>
      <td colspan=3D5 style=3D'padding:0in 0in 0in 0in;height:23=2E25pt'>
      <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><b><=
span
      style=3D'color:white'><a
      href=3D"http://200=2E69=2E192=2E45/templates/211=2Easp?formid=3D211"=
><span
      style=3D'text-decoration:none;text-underline:none'><img border=3D0 w=
idth=3D110
      height=3D36 id=3D"_x0000_i1041"
      src=3D"http://200=2E69=2E192=2E45/images/110_boton=2Egif"></span></a=
></span></b></p>
      </td>
     </tr>
    </table>
    </div>
    <p class=3DMsoNormal><o:p></o:p></p>
    </td>
   </tr>
   <tr style=3D'height:1=2E5pt'>
    <td style=3D'padding:0in 0in 0in 0in;height:1=2E5pt'>
    <div align=3Dcenter>
    <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=
=3D'width:100=2E0%;
     mso-cellspacing:0in;mso-padding-alt:7=2E5pt 7=2E5pt 7=2E5pt 7=2E5pt'>=

<tr>
      <td width=3D"22%" style=3D'width:22=2E0%;padding:7=2E5pt 7=2E5pt 7=2E=
5pt 7=2E5pt'>
      <p class=3DMsoNormal> </p>
      </td>
      <td width=3D"34%" style=3D'width:34=2E0%;padding:7=2E5pt 7=2E5pt 7=2E=
5pt 7=2E5pt'>
      <p class=3DMsoNormal><b><span lang=3DES-MX style=3D'font-size:10=2E0=
pt;
      font-family:Arial;color:white;mso-ansi-language:ES-MX'>Buenos Aires =
</span></b><span
      lang=3DES-MX style=3D'font-size:10=2E0pt;font-family:Arial;color:whi=
te;
      mso-ansi-language:ES-MX'><br>
      Talcahuano 446 2=BA piso <br>
      Buenos Aires, Argentina <br>
      54-11-4375-5000 <br>
      buenosaires at soluciones=2Ecom </span><span lang=3DES-MX style=3D'mso-=
ansi-language:
      ES-MX'><o:p></o:p></span></p>
      </td>
      <td width=3D"44%" style=3D'width:44=2E0%;padding:7=2E5pt 7=2E5pt 7=2E=
5pt 7=2E5pt'>
      <p class=3DMsoNormal><b><span style=3D'font-size:10=2E0pt;font-famil=
y:Arial;
      color:white'>Miami</span></b><span style=3D'font-size:10=2E0pt;font-=
family:
      Arial;color:white'> <br>
      3255 NE 184th Street Aventura Fl=2E 33160 <br>
      Miami, Usa <br>
      Phone 786-2717171 <br>
      miami at soluciones=2Ecom</span></p>
      </td>
     </tr>
     <tr style=3D'height:1=2E5pt'>
      <td colspan=3D3 style=3D'padding:7=2E5pt 7=2E5pt 7=2E5pt 7=2E5pt;hei=
ght:1=2E5pt'>
      <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center;mso-l=
ine-height-alt:
      1=2E5pt'><b><span lang=3DES-MX style=3D'font-size:7=2E5pt;font-famil=
y:Tahoma;
      color:white;mso-ansi-language:ES-MX'>sea no recibir m=E1s informaci=F3=
n haga
      click en </span></b><b><span style=3D'font-size:7=2E5pt;font-family:=
Tahoma;
      color:white'><a
      href=3D"mailto:remover at soluciones=2Ecom?Subject=3DRemover&body=3D=
Por%20favor%20no%20modifique%20el%20subject%20del%20mail=2E"><span
      lang=3DES-MX style=3D'mso-ansi-language:ES-MX'>Remover</span></a></s=
pan></b><span
      lang=3DES-MX style=3D'mso-ansi-language:ES-MX'><o:p></o:p></span></p=
>
      </td>
     </tr>
    </table>
    </div>
    <p class=3DMsoNormal align=3Dcenter style=3D'text-align:center'><span
    style=3D'display:none;mso-hide:all'><![if !supportEmptyParas]> <!=
[endif]><o:p></o:p></span></p>
    <div align=3Dcenter>
    <table border=3D0 cellspacing=3D0 cellpadding=3D0 width=3D"100%" style=
=3D'width:100=2E0%;
     mso-cellspacing:0in;mso-padding-alt:0in 0in 0in 0in'>
     <tr style=3D'height:1=2E5pt' background=3D"gif/pixelbco=2Egif">
      <td colspan=3D2 style=3D'padding:0in 0in 0in 0in;height:1=2E5pt'>
      <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><img bord=
er=3D0
      width=3D1 height=3D1 id=3D"_x0000_i1042" src=3D"gif\pixelbco=2Egif">=
</p>
      </td>
     </tr>
     <tr style=3D'height:20=2E25pt'>
      <td width=3D"79%" style=3D'width:79=2E0%;background:#3B4D54;padding:=
0in 0in 0in 0in;
      height:20=2E25pt'>
      <p class=3DMsoNormal><![if !supportEmptyParas]> <![endif]><o:p>=
</o:p></p>
      </td>
      <td width=3D"21%" style=3D'width:21=2E0%;background:#3B4D54;padding:=
0in 0in 0in 0in;
      height:20=2E25pt'>
      <p class=3DMsoNormal><img border=3D0 width=3D158 height=3D10 id=3D"_=
x0000_i1043"
      src=3D"http://200=2E69=2E192=2E45/images/110_direcweb=2Egif"></p>
      </td>
     </tr>
    </table>
    </div>
    <p class=3DMsoNormal style=3D'mso-line-height-alt:1=2E5pt'><o:p></o:p>=
</p>
    </td>
   </tr>
  </table>
  <p class=3DMsoNormal>s</p>
  </td>
 </tr>
</table>

</div>

</div>

</body>

</html>

------=_NextPart_84815C5ABAF209EF376268C8--

From raeburn at MIT.EDU  Tue Mar 26 20:48:05 2002
From: raeburn at MIT.EDU (raeburn@MIT.EDU)
Date: Tue, 26 Mar 2002 20:48:05 -0500
Subject: krb5-kdc/1080: kprop should have sanity checks for database shrinkage
Message-ID: <200203270148.UAA22054@all-in-one.mit.edu>

>Number:         1080
>Category:       krb5-kdc
>Synopsis:       kprop should have sanity checks for database shrinkage
>Confidential:   no
>Severity:       serious
>Priority:       medium
>Responsible:    krb5-unassigned
>State:          open
>Class:          change-request
>Submitter-Id:   unknown
>Arrival-Date:   Tue Mar 26 20:49:00 EST 2002
>Last-Modified:
>Originator:     Ken Raeburn
>Organization:
	very little
>Release:        1.2.2
>Environment:
	
System: Linux all-in-one.mit.edu 2.4.9-12smp #1 SMP Tue Oct 30 18:16:48 EST 2001 i686 unknown
Architecture: i686

>Description:

The kprop code should watch out for cases where the database shrinks
noticably, say by 10% or more and configurable by the sysadmin, and it
should give an error and refuse to do the propagation until the error
is reset.

From: peirce at gumby.it.wmich.edu (Leonard J. Peirce)
    Subject: Weird KDC behaviour with getprincs/kdb5_util (V5 1.2.2, Solaris 8)
    To: kerberos at MIT.EDU
    Date: Tue, 26 Mar 2002 21:21:55 +0000 (UTC)
    Organization: Western Michigan University

This is V5 1.2.2 running on Solaris 8....

We're seeing something very strange on our KDC.  We have approximately
    46,000 total principals.  When we propagate (kdb5_util dump) or do
    getprincs in kadmin to get a list of all principal names the resulting
    output (in both cases) is missing over half of the principals that we
    know are in the database.  Our slave server is pretty much useless at
    this point until we get this working again.

The really odd part is that the principals that don't show up are in the
    database and continue to work fine.  Users can get tickets, use them for
    rlogin/telnet/ftp, and change their passwords.  We can do getprinc for any
    one of the missing entries and they show up just fine.  But running getprincs
    to list the entire database or kdb5_util dump both fail to list them.

BTW, I tried using

kdb5_util dump dump.out <principal>

to dump a single principal and didn't get the principal dumped.  Instead,
    it appeared to dump just the policies that we have defined.  Am I misreading
    the man page?  I had hoped to be able to dump each individual principal,
    append to a file, and possibly reload the database.

Any suggestions on troubleshooting this?  Could it be a buffer being over-
    run someplace?

Any help would, of course, be greatly appreciated.

--
    Leonard J. Peirce                   Email:  leonard.peirce at wmich.edu
    UNIX System Manager
    Western Michigan University
    Office of Information Technology
    Kalamazoo, MI  49008                Phone:  (616) 387-5430
    ________________________________________________
    Kerberos mailing list           Kerberos at mit.edu
    http://mailman.mit.edu/mailman/listinfo/kerberos

>How-To-Repeat:
	
>Fix:
	
>Audit-Trail:
>Unformatted:

From crawdad at gungnir.fnal.gov  Thu Mar 28 10:25:32 2002
From: crawdad at gungnir.fnal.gov (Matt Crawford)
Date: Thu, 28 Mar 2002 09:25:32 -0600 (CST)
Subject: krb5-kdc/1081: Need a way to allow user-to-user but not other TGS-REQs
Message-ID: <200203281525.g2SFPWM25016@gungnir.fnal.gov>

>Number:         1081
>Category:       krb5-kdc
>Synopsis:       enhancement request: allow user2user only
>Confidential:   no
>Severity:       non-critical
>Priority:       medium
>Responsible:    krb5-unassigned
>State:          open
>Class:          change-request
>Submitter-Id:   unknown
>Arrival-Date:   Thu Mar 28 10:26:00 EST 2002
>Last-Modified:
>Originator:     Matt Crawford
>Organization:
Fermilab
>Release:        krb5-1.2.3
>Environment:
Sun Netra-1 Solaris 2.8
System: SunOS gungnir.fnal.gov 5.8 Generic_108528-08 sun4u sparc SUNW,Ultra-1
Architecture: sun4

>Description:
	KRB5_KDB_DISALLOW_SVR disallows all TGS requests for a given
	service principal.  There needs to be away to disallow all but
	USER2USER.
>How-To-Repeat:
	Test with sample uuclient/uuserver
>Fix:
	Suggestions have appeared in krbdev list.  I'm just being a good
	boy by putting this into the bug queue to keep it on the radar.
>Audit-Trail:
>Unformatted: